legal vulnerabilities